Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: +vb06bzhUicz9usGhxo35KFpNWrmsB5gUqYonJk1TaQ=
Subject key identifier: D5:AE:54:CF:88:8E:C5:23:E9:A3:E2:84:28:9E:66:8F:0D:F7:7B:9B
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 0199C5698641B61CE904270040122708A5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0CB5
Signing time: Wed 08 Oct 2025 20:00:51 +0000
Manifest this update: Wed 08 Oct 2025 20:00:51 +0000
Manifest next update: Thu 09 Oct 2025 20:00:51 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: +FTSbp6woFYIhb5nA+VxoUsEaVN+kDizHgMw8wHuzYw=)
2: ejP-cqngAl2WeEUv13m8XETr7WY.roa (hash: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=)
3: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (hash: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:86:41:b6:1c:e9:04:27:00:40:12:27:08:a5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Oct 8 20:00:51 2025 GMT
Not After : Oct 9 20:00:51 2025 GMT
Subject: CN=d5ae54cf888ec523e9a3e284289e668f0df77b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:f8:df:e8:be:d9:03:3b:b7:02:af:14:3f:
55:08:da:6f:d6:1b:70:48:f4:ee:97:70:de:a8:a2:
30:3d:7c:8c:73:ee:ac:c4:c2:60:37:b8:e5:a5:77:
b6:2a:33:c2:05:36:2c:ad:3d:92:e8:1d:4e:b3:39:
47:16:56:44:fc:cc:15:92:8d:f1:ba:23:44:7c:36:
b0:0b:96:6c:f4:51:98:60:c9:19:2a:7a:07:4c:59:
85:26:b5:9a:85:89:b0:18:dc:a2:c2:a6:55:86:5a:
f6:55:e7:f4:35:2c:7b:2d:ce:5b:eb:68:06:29:dd:
14:7c:a8:d2:0b:59:ea:69:08:86:f8:3f:b7:f9:d2:
bf:0c:d8:79:7b:7c:7a:da:5b:2d:14:06:4c:70:9b:
1e:6c:e1:20:83:a8:36:b9:2b:f8:63:90:6f:55:52:
ba:82:54:fd:6b:87:c4:a3:59:3c:58:30:c0:a6:d0:
9a:c4:e9:f2:78:9f:6e:ea:7a:cc:d1:85:75:77:cc:
6a:81:0f:0e:0a:12:a6:f2:98:b2:2e:46:14:ce:1e:
d4:6f:47:80:37:fd:21:a2:69:5a:48:30:a6:75:d2:
66:fb:c4:d0:6f:66:e4:cd:ac:95:d8:e6:ee:9e:6e:
6a:86:9a:d0:59:10:c9:43:d7:56:69:a3:51:ca:32:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AE:54:CF:88:8E:C5:23:E9:A3:E2:84:28:9E:66:8F:0D:F7:7B:9B
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fc:6d:24:cb:15:47:56:68:f1:09:cc:e0:9c:96:5b:64:9c:
8f:9b:83:35:a1:4e:30:3a:bb:e8:ce:59:3d:6b:9c:93:31:2a:
31:7b:bc:24:ed:44:5b:97:44:0f:90:9d:a8:71:e5:6b:3a:35:
f8:18:ca:44:e9:8d:58:80:10:ad:2a:bb:27:47:c0:b7:10:5c:
da:d6:85:ef:7b:8c:9e:2c:83:28:ba:d7:fc:1a:5e:fa:b3:43:
4c:ec:e4:4d:98:5d:1b:ba:5f:1e:ec:a9:e9:41:55:b5:2d:3b:
fb:c1:46:5a:25:ee:e3:0e:0c:77:8b:4b:d9:cf:74:dc:9c:80:
c8:7e:ae:f8:4c:ef:15:2a:a1:9d:c5:31:24:66:d3:4f:78:2c:
75:e1:dc:ed:ad:37:f3:cd:78:06:ba:4a:cf:97:74:e6:26:fa:
dc:a9:5f:b0:c8:31:e4:08:ba:8e:9c:57:3a:4f:c6:24:41:fc:
6c:00:2c:21:a6:66:2c:ec:2c:07:2a:3e:7e:72:59:a7:11:a1:
9f:9a:a4:de:25:d4:ef:ff:ac:78:62:e2:18:19:1a:30:5a:98:
63:9f:cc:ac:1c:5d:40:c5:39:db:34:4d:b0:b9:f5:28:a5:cf:
b3:f6:dc:6d:04:ec:a3:70:bf:48:f9:57:60:da:31:f3:fb:4d:
41:a7:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:53:40 2025 by rpki-client